Windows Active Directory Architect

Windows / Active Directory Infrastructure Architect Location: New York, NY We are seeking an experienced Windows / Active Directory Infrastructure Engineer to support and modernize a large-scale, mission‑critical Microsoft infrastructure environment. This role is part of a managed systems engineering team responsible for maintaining highly available compute infrastructure that supports global business operations 24/7. We believe the ideal candidate will have deep hands‑on experience with Active Directory architecture, security, administration, automation, and infrastructure hardening in a large enterprise environment. This position will play a key role in strengthening identity services, improving reliability, enhancing security posture, and supporting the continued evolution of Windows services across a complex distributed environment. Key Responsibilities Design, administer, secure, and support large-scale Active Directory environments, including forests, domains, trusts, replication strategies, and privileged access models. Manage and enhance core Microsoft infrastructure services including Active Directory, Group Policy, DNS, DHCP, and Windows Server platforms. Support modernization efforts for enterprise identity and authentication services across development and production environments. Implement and maintain Active Directory security controls, hardening initiatives, and vulnerability remediation efforts. Deploy and manage Windows Local Administrator Password Solution and other privileged access security tools. Support MFA implementation for critical systems and privileged access workflows. Deploy and manage Windows security features such as Credential Guard and other credential theft mitigation technologies. Assess Active Directory environments for security risks, misconfigurations, and privilege escalation paths. Apply least‑privilege principles, administrative tiering models, privileged access management practices, and secure workstation strategies. Automate administrative tasks, reporting, and operational processes using PowerShell. Partner with security, compliance, and infrastructure teams to support auditing, governance, and regulatory requirements. Create and maintain clear technical documentation, operational procedures, and infrastructure standards. Required Qualifications 7+ years of experience architecting, administering, and securing Active Directory in large enterprise environments. Strong expertise in Active Directory, Group Policy, DNS, DHCP, and Windows Server administration. Experience in CyberArk PAM. Hands‑on experience implementing Active Directory security controls and hardening initiatives. Experience deploying and managing Windows Local Administrator Password Solution. Experience implementing and supporting MFA for key systems. Experience with Windows security technologies such as Credential Guard and other credential theft mitigation solutions. Strong understanding of identity lifecycle management, authentication protocols including Kerberos and NTLM, and access control models. Proven experience designing and implementing AD forests, domains, trusts, replication, and privileged access models. Knowledge of Active Directory tiering, privileged access management, administrative workstation strategies, and least-privilege practices. Experience identifying and remediating Active Directory vulnerabilities and misconfigurations. Strong PowerShell scripting and automation skills. Experience working in regulated environments with a focus on compliance, auditing, and security governance. Bachelor’s degree in Computer Science, Engineering, Mathematics, a related field, or equivalent professional experience. Preferred Qualifications Familiarity with Active Directory security assessment tools, attack path analysis, and privilege escalation remediation. Experience integrating Active Directory with Linux systems, SaaS applications, or other enterprise platforms. Strong understanding of EDR, endpoint security, and security monitoring solutions within Windows environments. Strong documentation, communication, and cross‑functional collaboration skills. Proactive problem‑solving mindset with a focus on continuous improvement. Microsoft certifications such as Identity and Access Administrator Associate, Security Operations Analyst Associate, Azure Solutions Architect, or similar credentials. #J-18808-Ljbffr PRI Technology